Vulnerability in Openads

CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details are obtained from third party information.

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.

Affected products

  • Openads — versions 2.3.30
  • N/a — versions n/a

References